# Vendored libraries

Third-party files the WebUI ships as-is. They live here instead of being loaded from a CDN
because the target machine may have no internet access (WebUI-Leitfaden). Do not edit them;
to update, replace the file and this table together.

Downloaded 2026-09-24 from the npm registry. Each tarball was checked against the
`dist.integrity` (SHA-512) the registry publishes before extracting.

| Package | Version | File | License | SHA-256 of the file |
|---|---|---|---|---|
| [elkjs](https://www.npmjs.com/package/elkjs) | 0.9.3 | `elkjs/elk.bundled.js` | EPL-2.0 | `b0745abd7f23cd91690a1587e377edbe19fd7233c783300290936720546216d4` |

**Why elkjs 0.9.3 and not the newest.** It came in together with cytoscape-elk 2.3.0,
which declared `elkjs ^0.9.3`. Cytoscape and the adapter were removed again on 2026-09-24
(see below); elkjs stays at the version it was checked at. Raising it is a separate change.

**Why Cytoscape is gone.** The team overview (#711) first drew its graph with Cytoscape.js
on a canvas. A canvas node cannot hold a list of agents, a search highlight or the house
style, so the cards became plain HTML placed by ELK, with the lines in SVG. Nothing else
used Cytoscape.

**How it is loaded.** `elk.bundled.js` is a UMD bundle and, loaded as a classic script,
registers the global `ELK`. The team overview loads it on demand, so pages that do not draw
the organisation do not pay for ~1.5 MB of script.

The license texts sit next to each file.